From 9e177dcc41e07df36a03704d6fa05037159987ad Mon Sep 17 00:00:00 2001 From: Jonathon Wright Date: Sat, 27 Jun 2026 20:42:02 +1000 Subject: [PATCH] ui+content: zoom the backdrop + de-dupe blog titles MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Backdrop image scaled 168% → 215% so the Bat-Computer board reads bigger and more immersive, with more room for the scroll-pan. - Retitle the least-privilege post "The most secure credential is the one you never mount" → "Every pod holds a key to a door it never opens" so it no longer mirrors the "...inbound port is the one you never open" post. --- src/content/blog/workload-least-privilege.md | 2 +- src/styles/global.css | 6 ++++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/src/content/blog/workload-least-privilege.md b/src/content/blog/workload-least-privilege.md index 17791b5..1287525 100644 --- a/src/content/blog/workload-least-privilege.md +++ b/src/content/blog/workload-least-privilege.md @@ -1,5 +1,5 @@ --- -title: "The most secure credential is the one you never mount" +title: "Every pod holds a key to a door it never opens" date: 2026-06-23 summary: "Least privilege for Kubernetes workloads doesn't start with an RBAC role — it starts with revoking the API token every pod silently carries, then layering identity, non-root, and Pod Security on top." tags: ["kubernetes", "security", "least-privilege", "rbac", "service-accounts"] diff --git a/src/styles/global.css b/src/styles/global.css index 0406185..d424a57 100644 --- a/src/styles/global.css +++ b/src/styles/global.css @@ -371,8 +371,10 @@ svg { position: absolute; top: 50%; left: 50%; - width: 168%; - height: 168%; + /* Zoomed in — larger than viewport so the board reads big/immersive and the + scroll-pan has room to travel. */ + width: 215%; + height: 215%; object-fit: cover; transform: translate(-50%, -50%); will-change: transform;